Description
Certain HP DeskJet All in One devices
may be vulnerable to remote code execution caused by a buffer overflow when
specially crafted Web Services for Devices (WSD) scan requests are improperly
validated and handled by the MFP.
WSD
Scan is a Microsoft Windows–based network scanning protocol that allows a PC to
discover scanners (and MFPs) on a network and send scan jobs to them without
requiring vendor specific drivers or utilities.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HP | HP DeskJet 2800e All-in-One Printer series | < <2612A | <2612A |
| HP | HP DeskJet 4200 All-in-One Printer series | < <2612A | <2612A |
| HP | HP DeskJet Ink Advantage 4200 All-in-One Printer series | < <2612A | <2612A |
| HP | HP DeskJet 4200e All-in-One Printer series | < <2612A | <2612A |
| HP | HP DeskJet Ink Advantage Ultra 4900 series | < <2612A | <2612A |
| HP | HP DeskJet Ink Advantage 2800 All-in-One Printer series | < <2612A | <2612A |